syzbot


KCSAN: data-race in drain_all_stock / drain_stock.isra.0

Status: auto-closed as invalid on 2020/04/19 21:34
Subsystems: cgroups mm
[Documentation on labels]
First crash: 1545d, last: 1537d

Sample crash report:
==================================================================
BUG: KCSAN: data-race in drain_all_stock / drain_stock.isra.0

write to 0xffff88812c02a208 of 4 bytes by task 7930 on cpu 0:
 drain_stock.isra.0+0x8f/0x100 mm/memcontrol.c:2087
 refill_stock+0xa2/0x110 mm/memcontrol.c:2123
 try_charge+0xa60/0xbf0 mm/memcontrol.c:2534
 __memcg_kmem_charge_memcg+0x4a/0xe0 mm/memcontrol.c:2837
 __memcg_kmem_charge+0xcf/0x1b0 mm/memcontrol.c:2877
 __alloc_pages_nodemask+0x26c/0x310 mm/page_alloc.c:4780
 alloc_pages_current+0xd1/0x170 mm/mempolicy.c:2207
 alloc_pages include/linux/gfp.h:532 [inline]
 __pte_alloc_one include/asm-generic/pgalloc.h:63 [inline]
 pte_alloc_one+0x18/0x50 arch/x86/mm/pgtable.c:26
 __pte_alloc+0x2d/0x220 mm/memory.c:426
 copy_pte_range mm/memory.c:816 [inline]
 copy_pmd_range mm/memory.c:892 [inline]
 copy_pud_range mm/memory.c:926 [inline]
 copy_p4d_range mm/memory.c:948 [inline]
 copy_page_range+0x13a2/0x1a00 mm/memory.c:1010
 dup_mmap kernel/fork.c:604 [inline]
 dup_mm+0x74a/0xba0 kernel/fork.c:1360
 copy_mm kernel/fork.c:1416 [inline]
 copy_process+0x3539/0x3cd0 kernel/fork.c:2072
 _do_fork+0xfe/0x7a0 kernel/fork.c:2421
 __do_sys_clone kernel/fork.c:2576 [inline]
 __se_sys_clone kernel/fork.c:2557 [inline]
 __x64_sys_clone+0x130/0x170 kernel/fork.c:2557
 do_syscall_64+0xcc/0x3a0 arch/x86/entry/common.c:294
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

read to 0xffff88812c02a208 of 4 bytes by task 313 on cpu 1:
 drain_all_stock mm/memcontrol.c:2159 [inline]
 drain_all_stock+0xe5/0x250 mm/memcontrol.c:2138
 try_charge+0x79b/0xbf0 mm/memcontrol.c:2462
 mem_cgroup_charge_skmem+0xd5/0x190 mm/memcontrol.c:6783
 __sk_mem_raise_allocated+0x452/0x9f0 net/core/sock.c:2502
 __sk_mem_schedule+0x7a/0xd0 net/core/sock.c:2587
 sk_wmem_schedule include/net/sock.h:1417 [inline]
 tcp_sendmsg_locked+0x1301/0x2040 net/ipv4/tcp.c:1334
 tcp_sendmsg+0x39/0x60 net/ipv4/tcp.c:1436
 inet_sendmsg+0x6d/0x90 net/ipv4/af_inet.c:807
 sock_sendmsg_nosec net/socket.c:639 [inline]
 sock_sendmsg+0x9f/0xc0 net/socket.c:659
 __sys_sendto+0x21f/0x320 net/socket.c:1985
 __do_sys_sendto net/socket.c:1997 [inline]
 __se_sys_sendto net/socket.c:1993 [inline]
 __x64_sys_sendto+0x89/0xb0 net/socket.c:1993
 do_syscall_64+0xcc/0x3a0 arch/x86/entry/common.c:294
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 313 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/02/09 21:28 https://github.com/google/ktsan.git kcsan f60f0f543333 6ece2ea5 .config console log report ci2-upstream-kcsan-gce
2020/02/01 22:04 https://github.com/google/ktsan.git kcsan 245a43005292 326d4c78 .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.